Managed XDR

vtdl_hdklle_o — malware analysis report

File info

Filename
vtdl_hdklle_o
File type
MS Windows shortcut, Item id list present, ctime=Sat Sep 14 07:52:10 2024, mtime=Sat Sep 14 07:52:10 2024, atime=Sat Sep 14 07:52:10 2024, length=0, window=hide
File size
1 KB
First seen
Last seen

Environment

win7/x86 en

Hashes

SHA1
1a87b137d505b7335e92d0b70b37fead5c48fa2d
SHA256
a1703ce76caf7f44f0adb1d818a411fea3922f5104cd0414ee9f2604ffa3b38a
MD5
2df915608bf68b2c608ed8254db7dc36

Signatures

Privilege Escalation

T1134 opens_thread_token: Opens the access token associated with a thread
T1134 opens_process_token: Opens the access token associated with a process

Defense Evasion

T1134 opens_thread_token: Opens the access token associated with a thread
T1134 opens_process_token: Opens the access token associated with a process

Other

yara_rules: Static rules
unexpected_exception: Unexpected exception
creates_suspended_process: Creates suspended process